1Rule 1.4

1  Rule 1.4

Omit:

A CDR consumer who, in accordance with a Schedule to these rules, is eligible to do so may request an accredited person to request a data holder to disclose CDR data that relates to the consumer. The request made by the accredited person is called a consumer data request.

A consumer data request that is made on behalf of a CDR consumer by an accredited person must be made in accordance with relevant data standards, using a specialised service provided by the data holder. The data is disclosed, in machine‑readable form, to the accredited person.

Under the data minimisation principle, the accredited person may only collect and use CDR data in order to provide goods or services in accordance with a request from a CDR consumer.

substitute:

A CDR consumer who, in accordance with a Schedule to these rules, is eligible to do so may request an accredited person to request a CDR participant to disclose CDR data that relates to the consumer. The request made by the accredited person is called a consumer data request.

A consumer data request that is made to a data holder on behalf of a CDR consumer by an accredited person must be made in accordance with relevant data standards, using a specialised service provided by the data holder. The data is disclosed, in machine‑readable form, to the accredited person.

Under the data minimisation principle, the accredited person may only collect and use CDR data in order to provide goods or services in accordance with a request from a CDR consumer, and may only use it for that purpose, or for a limited number of other purposes which require an additional consent from the CDR consumer.

2  Subrule 1.6(4)

Omit “are made by accredited persons on behalf of such eligible CDR consumers”, substitute “involve accredited persons”.

3  Subrule 1.7(1)

account privileges, in relation to:

 (a) an account with a data holder; and

 (b) a particular designated sector;

  has the meaning set out in a Schedule to these rules that relates to that sector.

AP disclosure consent has the meaning given by rule 1.10A.

authorisation to disclose CDR data means:

 (a) an authorisation given by a CDR consumer under Part 4 to a data holder; or

 (b) such an authorisation as amended in accordance with these rules.

category, of consents, has the meaning given by rule 1.10A.

4  Subrule 1.7(1) (paragraph (b) of the definition of CDR complaint data)

 (b) the number of such complaints for each complaint type into which the CDR participant categorises complaints in accordance with its complaints handling process;